Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30919e-2df6-43ab-9bde-e41682463c8a/1/6T2jrP6ON_Gg1xosFcqhwUkMMw8.roa
File: 6T2jrP6ON_Gg1xosFcqhwUkMMw8.roa (raw, json)
Hash identifier: u/QkpL33JleTCkbVuhtWFeNwOpOkysAWBj8kYt3xgaU=
Subject key identifier: E9:3D:A3:AC:FE:8E:37:F1:A0:D7:1A:2C:15:CA:A1:C1:49:0C:33:0F
Certificate issuer: /CN=6a437c01731d107ca2ceed8213a273fddd4c64a5
Certificate serial: 01856C1C8F48156DCB8AF2DB045A7F963865
Authority key identifier: 6A:43:7C:01:73:1D:10:7C:A2:CE:ED:82:13:A2:73:FD:DD:4C:64:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akN8AXMdEHyizu2CE6Jz_d1MZKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30919e-2df6-43ab-9bde-e41682463c8a/1/6T2jrP6ON_Gg1xosFcqhwUkMMw8.roa
Signing time: Sun 01 Jan 2023 06:54:49 +0000
ROA not before: Sun 01 Jan 2023 06:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 185.61.44.0/24 maxlen: 24
185.61.46.0/24 maxlen: 24
185.61.47.0/24 maxlen: 24
185.61.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:8f:48:15:6d:cb:8a:f2:db:04:5a:7f:96:38:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a437c01731d107ca2ceed8213a273fddd4c64a5
Validity
Not Before: Jan 1 06:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e93da3acfe8e37f1a0d71a2c15caa1c1490c330f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:44:88:c9:b9:67:ae:24:3d:fd:89:cf:a4:2b:
1d:7d:2e:63:57:65:b4:7c:33:f2:1e:bd:b8:17:92:
2e:64:49:a5:26:14:93:96:f2:1d:ce:38:b8:a9:26:
74:c4:62:e4:b9:75:7a:a1:2d:de:c4:c4:63:65:59:
9b:07:1f:0e:a1:cb:78:de:f2:27:b0:b6:ab:c1:cb:
5e:71:55:81:17:1c:c4:e1:67:d8:8a:3b:6a:ec:c1:
24:a3:7c:b4:78:e8:df:70:c6:c7:4f:9a:c7:d7:e0:
0f:68:6f:0e:a9:c1:17:7a:b4:a7:13:d3:d4:22:80:
05:7b:d4:03:fd:d3:d8:f1:d6:2e:a7:66:2c:a4:45:
6b:46:38:da:1f:b8:74:29:38:ae:97:de:9a:df:14:
62:41:0d:ff:0c:10:49:48:44:d7:89:c1:9d:51:9f:
0b:05:de:42:d2:36:15:ef:43:30:df:e5:cf:a7:bd:
7d:36:fc:99:7e:e0:6b:07:49:06:c2:95:bd:6a:c3:
c6:4c:e3:b7:0c:33:34:ac:5a:e4:71:18:5d:96:c1:
89:52:11:49:55:cd:f5:72:97:98:7f:2b:40:1d:4d:
53:f1:2f:8d:ee:ec:80:bc:b5:5e:c4:2e:2d:21:67:
75:7f:f8:f3:50:ea:eb:97:68:96:af:a3:73:13:a5:
6f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3D:A3:AC:FE:8E:37:F1:A0:D7:1A:2C:15:CA:A1:C1:49:0C:33:0F
X509v3 Authority Key Identifier:
keyid:6A:43:7C:01:73:1D:10:7C:A2:CE:ED:82:13:A2:73:FD:DD:4C:64:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akN8AXMdEHyizu2CE6Jz_d1MZKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30919e-2df6-43ab-9bde-e41682463c8a/1/6T2jrP6ON_Gg1xosFcqhwUkMMw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30919e-2df6-43ab-9bde-e41682463c8a/1/akN8AXMdEHyizu2CE6Jz_d1MZKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.44.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:75:65:9d:26:50:4a:da:59:7c:62:3a:cb:66:16:53:cd:ca:
9d:b5:27:53:72:a4:52:61:65:dc:5e:7b:d5:94:c0:b6:49:82:
6b:3a:83:e4:3f:26:7e:89:92:f9:bb:85:dd:92:6a:6f:18:44:
41:ff:0b:03:4b:87:a8:77:35:c5:e6:5b:07:4b:e5:a9:0c:47:
2a:e8:06:d7:2d:4b:98:98:59:af:9a:30:54:03:f1:63:af:49:
36:ed:66:66:63:b9:9e:17:5f:ef:08:af:36:11:2a:74:4a:f1:
aa:89:c9:23:1d:68:fb:4e:53:0c:66:9d:93:2c:68:be:ea:da:
03:b2:bd:40:90:1f:56:6a:7c:2e:3d:80:8e:fb:54:c8:af:79:
87:80:80:4d:37:7f:6a:7d:e1:4c:3d:9d:0e:74:31:d2:17:1f:
b7:ea:67:df:92:43:e0:c4:1a:26:b8:35:55:ab:72:3a:6b:c6:
b3:54:64:a9:49:0b:e4:91:7a:92:a7:47:10:b9:44:20:d9:ad:
37:b2:99:cf:71:22:b2:8b:db:c9:3c:16:2c:f9:c4:e6:e8:3f:
aa:94:09:c9:a0:b6:f2:ab:78:9f:b3:1a:53:07:81:10:05:3b:
f5:cd:1a:dc:02:e3:eb:f2:5f:c1:30:dc:77:d4:3b:4a:0c:25:
06:b6:2a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-fra.rpki-client.org